Fortinet NSE4_FGT-6.0 問題集

質問 1：
Which of the following statements about NTLM authentication are correct? (Choose two.)
A. It takes over as the primary authentication method when configured alongside FSSO.
B. NTLM-enabled web browsers are required.
C. Multi-domain environments require DC agents on every domain controller.
D. It is useful when users log in to DCs that are not monitored by a collector agent.
正解：B,D

質問 2：
During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?
A. Data integrity.
B. Signature verification.
C. Non-repudiation.
D. Authentication.
正解：B

質問 3：
View the exhibit.

Based on the configuration shown in the exhibit, what statements about application control behavior are true?
(Choose two.)
A. Access to browser-based Social.Media applications will be blocked.
B. Access to mobile social media applications will be blocked.
C. Access to all unknown applications will be allowed.
D. Access to all applications in Social.Media category will be blocked.
正解：A,C

質問 4：
Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)
A. Warning
B. Allow
C. Exempt
D. Learn
正解：A,B

質問 5：
Which of the following statements about the FSSO collector agent timers is true?
A. The user group cache expiry is used to age out the monitored groups.
B. The IP address change verify interval monitors the server IP address where the collector agent is installed, and the updates the collector agent configuration if it changes.
C. The workstation verify interval is used to periodically check of a workstation is still a domain member.
D. The dead entry timeout interval is used to age out entries with an unverified status.
正解：D

質問 6：
Which statement is true regarding SSL VPN timers? (Choose two.)
A. Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
B. SSL VPN settings do not have customizable timers.
C. Allow to mitigate DoS attacks from partial HTTP requests.
D. Prevent SSL VPN users from being logged out because of high network latency.
正解：C,D

質問 7：
Which statements about DNS filter profiles are true? (Choose two.)
A. They can redirect blocked requests to a specific portal.
B. They must be applied in firewall policies with SSL inspection enabled.
C. They can block DNS requests to known botnet command and control servers.
D. They can inspect HTTP traffic.
正解：A,C

質問 8：
What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)
A. Incoming and outgoing interfaces
B. Lowest to highest policy ID number.
C. Highest to lowest priority defined in the firewall policy.
D. Services defined in the firewall policy.
正解：A,D